Extracted

Extracted

• • Target

    a096b9b34b47b0798f14ce64deeb07b86bc9416ae08504d0c68ec49ae064bce3

  • Size

    678KB

  • MD5

    3b2a8a2625640545605f63b988607788

  • SHA1

    4001a206aa4e5d5ff63113045e1c7006c9b81a0d

  • SHA256

    a096b9b34b47b0798f14ce64deeb07b86bc9416ae08504d0c68ec49ae064bce3

  • SHA512

    a1414c08b0b0512d42360c271fc94eb09a69523a1bc0e13d589bd13f0b77703a9a8f41ca525d632a5352a7584f5a75195f4de860a70d874028a1038a7ab5f414

  • SSDEEP

    12288:sjztKe5jWeeIO5eYAWJSn/NasPu/WH4w9i+jC+Hup3T4VP8KIxrs+N0Sc1:sjk9eemn/7uuY2RCruIdPc1

  Score

  10^/10

  amadeyredlinefurgadiscoveryevasioninfostealerpersistencespywarestealertrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1